hatchkit 0.1.47 → 0.2.2

package/dist/completion.js

@@ -16,6 +16,7 @@ const TOP_LEVEL = [
     "create",
     "adopt",
     "update",
+    "server",
     "add",
     "assets",
     "keys",
@@ -36,11 +37,14 @@ const CONFIG_ADD = [
     "replicate",
     "glitchtip",
     "openpanel",
+    "plausible",
     "resend",
+    "search-console",
     "stripe",
 ];
 const CONFIG_SUB = ["add", "reset"];
 const KEYS_SUB = ["show", "set", "rotate", "push"];
+const SERVER_SUB = ["add"];
 const SHELLS = ["zsh", "bash", "fish"];
 export function renderCompletion(shell) {
     if (shell === "zsh")
@@ -80,6 +84,9 @@ ${TOP_LEVEL.map((c) => `    '${c}:${topDesc(c)}'`).join("\n")}
         keys)
           _values 'keys subcommand' ${KEYS_SUB.map((s) => `'${s}'`).join(" ")}
           ;;
+        server)
+          _values 'server subcommand' ${SERVER_SUB.map((s) => `'${s}'`).join(" ")}
+          ;;
         assets)
           _values 'assets subcommand' ${ASSETS_SUB.map((s) => `'${s}'`).join(" ")}
           ;;
@@ -117,6 +124,7 @@ _hatchkit_complete() {
   local top="${TOP_LEVEL.join(" ")}"
   local config_sub="${CONFIG_SUB.join(" ")}"
   local keys_sub="${KEYS_SUB.join(" ")}"
+  local server_sub="${SERVER_SUB.join(" ")}"
   local assets_sub="${ASSETS_SUB.join(" ")}"
   local shells="${SHELLS.join(" ")}"
   local providers="${CONFIG_ADD.join(" ")}"
@@ -139,6 +147,11 @@ _hatchkit_complete() {
         COMPREPLY=( $(compgen -W "$keys_sub" -- "$cur") )
       fi
       ;;
+    server)
+      if [[ $cword -eq 2 ]]; then
+        COMPREPLY=( $(compgen -W "$server_sub" -- "$cur") )
+      fi
+      ;;
     assets)
       if [[ $cword -eq 2 ]]; then
         COMPREPLY=( $(compgen -W "$assets_sub" -- "$cur") )
@@ -180,6 +193,9 @@ function fish() {
     for (const s of KEYS_SUB) {
         lines.push(`complete -c hatchkit -n "__fish_seen_subcommand_from keys" -a "${s}"`);
     }
+    for (const s of SERVER_SUB) {
+        lines.push(`complete -c hatchkit -n "__fish_seen_subcommand_from server" -a "${s}"`);
+    }
     for (const s of ASSETS_SUB) {
         lines.push(`complete -c hatchkit -n "__fish_seen_subcommand_from assets" -a "${s}"`);
     }
@@ -209,10 +225,12 @@ function topDesc(cmd) {
             return "Adopt an existing project (run in project dir)";
         case "update":
             return "Add features to an already-scaffolded project";
+        case "server":
+            return "Retrofit a server into a client-only project";
         case "add":
-            return "Provision GlitchTip / OpenPanel / Resend clients";
+            return "Provision GlitchTip / OpenPanel / Plausible / Resend clients";
         case "assets":
-            return "Move bytes between local MinIO and prod buckets";
+            return "Move bytes between local S3 and prod buckets";
         case "keys":
             return "Manage per-project dotenvx private keys";
         case "config":

package/dist/completion.js.map

@@ -1 +1 @@
-{"version":3,"file":"completion.js","sourceRoot":"","sources":["../src/completion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,SAAS,GAAG;IAChB,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,MAAM;CACE,CAAC;AAEX,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAExE,MAAM,UAAU,GAAG;IACjB,SAAS;IACT,MAAM;IACN,SAAS;IACT,KAAK;IACL,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,IAAI;IACJ,WAAW;IACX,WAAW;IACX,WAAW;IACX,QAAQ;IACR,QAAQ;CACA,CAAC;AAEX,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,CAAU,CAAC;AAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAC5D,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAEhD,MAAM,UAAU,gBAAgB,CAAC,KAA8B;IAC7D,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,GAAG,EAAE,CAAC;IAClC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,GAAG;IACV,OAAO;;;;;;;;;EASP,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;wCAgBrB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;sCAG3C,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;wCAGrC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;4BAGrD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;4BAGrC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;+BAOrC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;CAQvE,CAAC;AACF,CAAC;AAED,SAAS,IAAI;IACX,OAAO;;;;;;;;;eASM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;sBACZ,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;oBACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;sBAChB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;kBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;qBACb,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCxC,CAAC;AACF,CAAC;AAED,SAAS,IAAI;IACX,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,yGAAyG,CAAC,GAAG,CAC9G,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,kDAAkD,CAAC;QAC5D,KAAK,QAAQ;YACX,OAAO,qDAAqD,CAAC;QAC/D,KAAK,QAAQ;YACX,OAAO,wCAAwC,CAAC;QAClD,KAAK,SAAS;YACZ,OAAO,kCAAkC,CAAC;QAC5C,KAAK,QAAQ;YACX,OAAO,wBAAwB,CAAC;QAClC,KAAK,OAAO;YACV,OAAO,gDAAgD,CAAC;QAC1D,KAAK,QAAQ;YACX,OAAO,+CAA+C,CAAC;QACzD,KAAK,KAAK;YACR,OAAO,kDAAkD,CAAC;QAC5D,KAAK,QAAQ;YACX,OAAO,iDAAiD,CAAC;QAC3D,KAAK,MAAM;YACT,OAAO,yCAAyC,CAAC;QACnD,KAAK,QAAQ;YACX,OAAO,6BAA6B,CAAC;QACvC,KAAK,YAAY;YACf,OAAO,iCAAiC,CAAC;QAC3C,KAAK,MAAM;YACT,OAAO,yBAAyB,CAAC;QACnC;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["../src/completion.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,SAAS,GAAG;IAChB,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,MAAM;CACE,CAAC;AAEX,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAExE,MAAM,UAAU,GAAG;IACjB,SAAS;IACT,MAAM;IACN,SAAS;IACT,KAAK;IACL,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,IAAI;IACJ,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,QAAQ;IACR,gBAAgB;IAChB,QAAQ;CACA,CAAC;AAEX,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,CAAU,CAAC;AAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAU,CAAC;AAC5D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAU,CAAC;AACpC,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAEhD,MAAM,UAAU,gBAAgB,CAAC,KAA8B;IAC7D,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,GAAG,EAAE,CAAC;IAClC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,GAAG;IACV,OAAO;;;;;;;;;EASP,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;wCAgBrB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;sCAG3C,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;wCAGrC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;wCAGzC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;4BAGrD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;4BAGrC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;+BAOrC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;CAQvE,CAAC;AACF,CAAC;AAED,SAAS,IAAI;IACX,OAAO;;;;;;;;;eASM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;sBACZ,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;oBACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;sBAChB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;sBACpB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;kBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;qBACb,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CxC,CAAC;AACF,CAAC;AAED,SAAS,IAAI;IACX,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,yGAAyG,CAAC,GAAG,CAC9G,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,kDAAkD,CAAC;QAC5D,KAAK,QAAQ;YACX,OAAO,qDAAqD,CAAC;QAC/D,KAAK,QAAQ;YACX,OAAO,wCAAwC,CAAC;QAClD,KAAK,SAAS;YACZ,OAAO,kCAAkC,CAAC;QAC5C,KAAK,QAAQ;YACX,OAAO,wBAAwB,CAAC;QAClC,KAAK,OAAO;YACV,OAAO,gDAAgD,CAAC;QAC1D,KAAK,QAAQ;YACX,OAAO,+CAA+C,CAAC;QACzD,KAAK,QAAQ;YACX,OAAO,8CAA8C,CAAC;QACxD,KAAK,KAAK;YACR,OAAO,8DAA8D,CAAC;QACxE,KAAK,QAAQ;YACX,OAAO,8CAA8C,CAAC;QACxD,KAAK,MAAM;YACT,OAAO,yCAAyC,CAAC;QACnD,KAAK,QAAQ;YACX,OAAO,6BAA6B,CAAC;QACvC,KAAK,YAAY;YACf,OAAO,iCAAiC,CAAC;QAC3C,KAAK,MAAM;YACT,OAAO,yBAAyB,CAAC;QACnC;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -96,10 +96,26 @@ export interface OpenpanelMeta extends ProviderStatus {
      *  creating a new project/client via the dashboard. */
     organizationSlug?: string;
 }
+export interface PlausibleMeta extends ProviderStatus {
+    /** Dashboard/API base URL. Cloud default is https://plausible.io. */
+    url: string;
+    /** Optional team id used when creating sites on multi-team accounts. */
+    teamId?: string;
+    /** IANA timezone sent for newly-created sites. */
+    timezone?: string;
+}
 export interface ResendMeta extends ProviderStatus {
     /** Optional default region for new sending domains ("us-east-1", "eu-west-1"…). */
     defaultRegion?: string;
 }
+export interface GoogleSearchConsoleMeta extends ProviderStatus {
+    /** Scopes granted to the stored refresh token. Non-sensitive; useful
+     *  in status/doctor output when a user authorized only one API. */
+    scopes?: string[];
+    /** `hatchkit-pkce` uses Hatchkit's shipped public desktop OAuth client.
+     *  `byo-client` is the legacy/user-owned Google Cloud OAuth client path. */
+    oauthMode?: "hatchkit-pkce" | "byo-client";
+}
 export interface StripeMeta extends ProviderStatus {
     /** Account id (`acct_…`) derived from the live master key during
      *  verification. Surfaced in `hatchkit doctor` so a silent
@@ -149,9 +165,17 @@ export interface OpenpanelConfig extends OpenpanelMeta {
     rootClientId: string;
     rootClientSecret: string;
 }
+export interface PlausibleConfig extends PlausibleMeta {
+    apiKey: string;
+}
 export interface ResendConfig extends ResendMeta {
     apiKey: string;
 }
+export interface GoogleSearchConsoleConfig extends GoogleSearchConsoleMeta {
+    clientId: string;
+    clientSecret?: string;
+    refreshToken: string;
+}
 export interface StripeConfig extends StripeMeta {
     /** Master secret key for test/sandbox-mode operations. Used by
      *  hatchkit ONLY to mint webhook endpoints in test mode. Never
@@ -185,7 +209,9 @@ export interface CliConfig {
         gpu: Record<string, GpuProviderMeta>;
         glitchtip?: GlitchtipMeta;
         openpanel?: OpenpanelMeta;
+        plausible?: PlausibleMeta;
         resend?: ResendMeta;
+        googleSearchConsole?: GoogleSearchConsoleMeta;
         stripe?: StripeMeta;
         ghcr?: GhcrMeta;
     };
@@ -261,14 +287,19 @@ export declare function ensureGlitchtip(): Promise<GlitchtipConfig>;
 export declare function getGlitchtipConfig(): Promise<GlitchtipConfig | null>;
 export declare function ensureOpenpanel(): Promise<OpenpanelConfig>;
 export declare function getOpenpanelConfig(): Promise<OpenpanelConfig | null>;
+export declare function ensurePlausible(): Promise<PlausibleConfig>;
+export declare function getPlausibleConfig(): Promise<PlausibleConfig | null>;
 export declare function ensureResend(): Promise<ResendConfig>;
 export declare function getResendConfig(): Promise<ResendConfig | null>;
+export declare function refreshGoogleSearchConsoleAccessToken(cfg: GoogleSearchConsoleConfig): Promise<string>;
+export declare function ensureGoogleSearchConsole(): Promise<GoogleSearchConsoleConfig>;
+export declare function getGoogleSearchConsoleConfig(): Promise<GoogleSearchConsoleConfig | null>;
 export declare function ensureStripe(): Promise<StripeConfig>;
 export declare function getStripeConfig(): Promise<StripeConfig | null>;
 export declare function ensureGhcr(): Promise<GhcrConfig>;
 export declare function getGhcrConfig(): Promise<GhcrConfig | null>;
 export declare function isFirstRun(): Promise<boolean>;
-type ReconfigurableProvider = "coolify" | "hetzner" | "dns" | "glitchtip" | "openpanel" | "resend" | "stripe" | "ghcr" | `s3.${"hetzner" | "aws" | "r2"}` | `gpu.${"modal" | "runpod" | "hf" | "replicate"}`;
+type ReconfigurableProvider = "coolify" | "hetzner" | "dns" | "glitchtip" | "openpanel" | "plausible" | "resend" | "search-console" | "stripe" | "ghcr" | `s3.${"hetzner" | "aws" | "r2"}` | `gpu.${"modal" | "runpod" | "hf" | "replicate"}`;
 /** Wipe + re-prompt for a single provider. Shared by the stepper and by
  *  `hatchkit config add <provider>` so both paths always re-prompt rather
  *  than silently no-op on already-configured providers. */

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,IAAI,MAAM,MAAM,CAAC;AAaxB;;;;;;;;;;;;8DAY8D;AAC9D,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAaf;AAeD;;;;;;;;;;;gBAWgB;AAChB,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0EvE;AAmBD;;sDAEsD;AACtD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBxE;AAMD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,GAAG,cAAc,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,WAAW,WAAY,SAAQ,cAAc;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,WAAY,SAAQ,cAAc;CAAG;AAEtD,MAAM,WAAW,OAAQ,SAAQ,cAAc;IAC7C;;;;yDAIqD;IACrD,QAAQ,EAAE,YAAY,CAAC;IACvB;;;qEAGiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;+EAE2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;6BACyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ;;;sDAGkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2DACuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD;;;mEAG+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;6CAEyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,QAAS,SAAQ,cAAc;IAC9C;;;;;oEAKgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,SAAU,SAAQ,OAAO;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;2EACuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,YAAa,SAAQ,UAAU;IAC9C,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,YAAa,SAAQ,UAAU;IAC9C;;kCAE8B;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;qBAEiB;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AACD,MAAM,WAAW,UAAW,SAAQ,QAAQ;IAC1C;mEAC+D;IAC/D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QACT,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,CAAC,EAAE,WAAW,CAAC;QACtB,OAAO,CAAC,EAAE,WAAW,CAAC;QACtB,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACnC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;QACpB,MAAM,CAAC,EAAE,UAAU,CAAC;QACpB,IAAI,CAAC,EAAE,QAAQ,CAAC;KACjB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3C;yEACqE;IACrE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;sDAEkD;IAClD,QAAQ,CAAC,EAAE;QACT;;uDAE+C;QAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAyDD;;eAEe;AACf,wBAAgB,QAAQ,oBAEvB;AAED,wBAAgB,SAAS,IAAI,SAAS,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;qDACqD;AACrD,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAGjD;AA4BD,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAqBlD;AAMD,wBAAsB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAmE5D;AAED;gEACgE;AAChE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAOtE;AAMD,wBAAsB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAkC5D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG9D;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAMtE;AAMD,wBAAsB,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CA0FpD;AAMD;;4CAE4C;AAC5C,wBAAgB,yBAAyB,IAAI,MAAM,GAAG,IAAI,CAGzD;AAED,4CAA4C;AAC5C,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED;;mEAEmE;AACnE,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,MAAM,CAAC,CAmBpE;AAED;;;;;;;;;GASG;AACH,wBAAsB,+BAA+B,IAAI,OAAO,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAeD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAgB9D;AAMD,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8K5F;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAqBpF;AAMD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,GAAG,WAAW,GAChD,OAAO,CAAC,iBAAiB,CAAC,CA6C5B;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMtF;AAMD,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAOlD;AAED;8DAC8D;AAC9D,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAIrD;AAMD,wBAAgB,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAE9D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAE3E;AAMD,wBAAsB,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,CA+ChE;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAM1E;AAMD,wBAAsB,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,CAqFhE;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAO1E;AAMD,wBAAsB,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAgC1D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAMpE;AAwGD,wBAAsB,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAwF1D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAOpE;AAyBD,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAyDtD;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAMhE;AAMD,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAGnD;AA0BD,KAAK,sBAAsB,GACvB,SAAS,GACT,SAAS,GACT,KAAK,GACL,WAAW,GACX,WAAW,GACX,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,MAAM,SAAS,GAAG,KAAK,GAAG,IAAI,EAAE,GAChC,OAAO,OAAO,GAAG,QAAQ,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;AAErD;;2DAE2D;AAC3D,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmErF;AAsLD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAuEnD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,OAAO,IAAI,MAAM,MAAM,CAAC;AAcxB;;;;;;;;;;;;8DAY8D;AAC9D,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAaf;AAeD;;;;;;;;;;;gBAWgB;AAChB,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0EvE;AAmBD;;sDAEsD;AACtD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBxE;AAMD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,GAAG,cAAc,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,WAAW,WAAY,SAAQ,cAAc;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,WAAY,SAAQ,cAAc;CAAG;AAEtD,MAAM,WAAW,OAAQ,SAAQ,cAAc;IAC7C;;;;yDAIqD;IACrD,QAAQ,EAAE,YAAY,CAAC;IACvB;;;qEAGiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;+EAE2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;6BACyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ;;;sDAGkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2DACuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D;uEACmE;IACnE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;gFAC4E;IAC5E,SAAS,CAAC,EAAE,eAAe,GAAG,YAAY,CAAC;CAC5C;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IAChD;;;mEAG+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;6CAEyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,QAAS,SAAQ,cAAc;IAC9C;;;;;oEAKgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,SAAU,SAAQ,OAAO;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;2EACuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,YAAa,SAAQ,UAAU;IAC9C,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,yBAA0B,SAAQ,uBAAuB;IACxE,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,YAAa,SAAQ,UAAU;IAC9C;;kCAE8B;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;qBAEiB;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AACD,MAAM,WAAW,UAAW,SAAQ,QAAQ;IAC1C;mEAC+D;IAC/D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QACT,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,CAAC,EAAE,WAAW,CAAC;QACtB,OAAO,CAAC,EAAE,WAAW,CAAC;QACtB,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACnC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACrC,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,MAAM,CAAC,EAAE,UAAU,CAAC;QACpB,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;QAC9C,MAAM,CAAC,EAAE,UAAU,CAAC;QACpB,IAAI,CAAC,EAAE,QAAQ,CAAC;KACjB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3C;yEACqE;IACrE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;sDAEkD;IAClD,QAAQ,CAAC,EAAE;QACT;;uDAE+C;QAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAyDD;;eAEe;AACf,wBAAgB,QAAQ,oBAEvB;AAED,wBAAgB,SAAS,IAAI,SAAS,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;qDACqD;AACrD,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAGjD;AA4BD,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAqBlD;AAMD,wBAAsB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAmE5D;AAED;gEACgE;AAChE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAOtE;AAMD,wBAAsB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAkC5D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG9D;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAMtE;AAMD,wBAAsB,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CA0FpD;AAMD;;4CAE4C;AAC5C,wBAAgB,yBAAyB,IAAI,MAAM,GAAG,IAAI,CAGzD;AAED,4CAA4C;AAC5C,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED;;mEAEmE;AACnE,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,MAAM,CAAC,CAmBpE;AAED;;;;;;;;;GASG;AACH,wBAAsB,+BAA+B,IAAI,OAAO,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC,CAeD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAgB9D;AAMD,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8K5F;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAqBpF;AAMD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,GAAG,WAAW,GAChD,OAAO,CAAC,iBAAiB,CAAC,CA6C5B;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMtF;AAMD,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAOlD;AAED;8DAC8D;AAC9D,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAIrD;AAMD,wBAAgB,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAE9D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAE3E;AAMD,wBAAsB,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,CA+ChE;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAM1E;AAMD,wBAAsB,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,CAqFhE;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAO1E;AAMD,wBAAsB,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC,CAgDhE;AAED,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAM1E;AAMD,wBAAsB,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAgC1D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAMpE;AAuMD,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAsBjB;AAED,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,yBAAyB,CAAC,CA4FpF;AAED,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAe9F;AAwGD,wBAAsB,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CAwF1D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAOpE;AAyBD,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAyDtD;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAMhE;AAMD,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAGnD;AA0BD,KAAK,sBAAsB,GACvB,SAAS,GACT,SAAS,GACT,KAAK,GACL,WAAW,GACX,WAAW,GACX,WAAW,GACX,QAAQ,GACR,gBAAgB,GAChB,QAAQ,GACR,MAAM,GACN,MAAM,SAAS,GAAG,KAAK,GAAG,IAAI,EAAE,GAChC,OAAO,OAAO,GAAG,QAAQ,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;AAErD;;2DAE2D;AAC3D,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6ErF;AAkND,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAuEnD"}

package/dist/config.js

@@ -1,9 +1,12 @@
+import { createHash, randomBytes } from "node:crypto";
+import { createServer } from "node:http";
 import { Separator, confirm, input, password, select } from "@inquirer/prompts";
 import chalk from "chalk";
 import Conf from "conf";
 import ora from "ora";
 import { verifyCoolify } from "./utils/coolify-api.js";
 import { execOk } from "./utils/exec.js";
+import { pickPort } from "./utils/ports.js";
 import { SECRET_KEYS, clearAllSecrets, deleteSecret, getSecret, setSecret, } from "./utils/secrets.js";
 import { validateRequired, validateUrl } from "./utils/validate.js";
 /** Sanity-check an S3 access/secret pair against shape rules. Returns
@@ -925,6 +928,55 @@ export async function getOpenpanelConfig() {
     return { ...meta, rootClientId, rootClientSecret };
 }
 // ---------------------------------------------------------------------------
+// Provider: Plausible (privacy-friendly web analytics)
+// ---------------------------------------------------------------------------
+export async function ensurePlausible() {
+    const existing = store.get("providers.plausible");
+    const existingKey = await getSecret(SECRET_KEYS.plausibleApiKey);
+    if (existing?.status === "configured" && existingKey) {
+        return { ...existing, apiKey: existingKey };
+    }
+    console.log(chalk.yellow("\n  Plausible is not configured yet. Let's set it up."));
+    const url = (await input({
+        message: "Plausible base URL:",
+        default: existing?.url ?? "https://plausible.io",
+        validate: (v) => validateUrl(v.trim()),
+    }))
+        .trim()
+        .replace(/\/$/, "");
+    tokenHint(`${url}/settings`, "Sites API key (can list/create/delete sites; Plausible Cloud requires a Sites API-enabled plan)");
+    const apiKey = await confirmPastedSecret("Plausible Sites API key");
+    const teamId = (await input({
+        message: "Plausible team id (optional):",
+        default: existing?.teamId ?? "",
+    })).trim();
+    const timezone = (await input({
+        message: "Default site timezone:",
+        default: existing?.timezone ?? "Etc/UTC",
+        validate: validateRequired,
+    })).trim();
+    const meta = {
+        status: "configured",
+        url,
+        teamId: teamId || undefined,
+        timezone,
+        lastVerified: new Date().toISOString(),
+    };
+    store.set("providers.plausible", meta);
+    await setSecret(SECRET_KEYS.plausibleApiKey, apiKey);
+    console.log(chalk.green("  ✓ Plausible configured"));
+    return { ...meta, apiKey };
+}
+export async function getPlausibleConfig() {
+    const meta = store.get("providers.plausible");
+    if (!meta || meta.status !== "configured")
+        return null;
+    const apiKey = await getSecret(SECRET_KEYS.plausibleApiKey);
+    if (!apiKey)
+        return null;
+    return { ...meta, apiKey };
+}
+// ---------------------------------------------------------------------------
 // Provider: Resend (transactional email SaaS)
 // ---------------------------------------------------------------------------
 export async function ensureResend() {
@@ -968,6 +1020,279 @@ export async function getResendConfig() {
     return { ...meta, apiKey };
 }
 // ---------------------------------------------------------------------------
+// Provider: Google Search Console
+// ---------------------------------------------------------------------------
+const GOOGLE_SEARCH_CONSOLE_SCOPES = [
+    "https://www.googleapis.com/auth/webmasters",
+    "https://www.googleapis.com/auth/siteverification.verify_only",
+];
+// Public Desktop OAuth client id for Hatchkit's own Google Cloud project.
+// Desktop/installed clients are public clients, so this value is safe to ship.
+// Until the Hatchkit project is verified, dev builds can set
+// HATCHKIT_GOOGLE_SEARCH_CONSOLE_CLIENT_ID to exercise the packaged PKCE path.
+const PACKAGED_GOOGLE_SEARCH_CONSOLE_CLIENT_ID = "932614455438-s0ih891al5pkeo4aeafekf01t6pbqd21.apps.googleusercontent.com";
+function hatchkitGoogleSearchConsoleClientId() {
+    const configured = process.env.HATCHKIT_GOOGLE_SEARCH_CONSOLE_CLIENT_ID?.trim() ||
+        PACKAGED_GOOGLE_SEARCH_CONSOLE_CLIENT_ID.trim();
+    return configured || null;
+}
+const GOOGLE_SEARCH_CONSOLE_SCOPE_REQUIREMENTS = [
+    {
+        label: "Search Console read/write",
+        scopes: ["https://www.googleapis.com/auth/webmasters"],
+    },
+    {
+        label: "Site Verification verify-only",
+        scopes: [
+            "https://www.googleapis.com/auth/siteverification.verify_only",
+            "https://www.googleapis.com/auth/siteverification",
+        ],
+    },
+];
+function assertGoogleSearchConsoleScopes(scopes) {
+    const granted = new Set(scopes);
+    const missing = GOOGLE_SEARCH_CONSOLE_SCOPE_REQUIREMENTS.filter((req) => !req.scopes.some((scope) => granted.has(scope)));
+    if (missing.length === 0)
+        return;
+    throw new Error("Google OAuth did not grant every scope Hatchkit needs. " +
+        `Missing: ${missing.map((m) => m.label).join(", ")}. ` +
+        "Re-run setup and approve both Search Console and Site Verification access.");
+}
+function base64Url(input) {
+    return input.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
+}
+function createPkcePair() {
+    const verifier = base64Url(randomBytes(64));
+    const challenge = base64Url(createHash("sha256").update(verifier).digest());
+    return { verifier, challenge };
+}
+async function exchangeGoogleCode(args) {
+    const body = new URLSearchParams({
+        client_id: args.clientId,
+        code: args.code,
+        grant_type: "authorization_code",
+        redirect_uri: args.redirectUri,
+    });
+    if (args.clientSecret)
+        body.set("client_secret", args.clientSecret);
+    if (args.codeVerifier)
+        body.set("code_verifier", args.codeVerifier);
+    const res = await fetch("https://oauth2.googleapis.com/token", {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body,
+    });
+    const json = (await res.json().catch(() => null));
+    if (!res.ok || !json?.access_token) {
+        const msg = json?.error_description ?? json?.error ?? `HTTP ${res.status}`;
+        throw new Error(`Google OAuth token exchange failed: ${msg}`);
+    }
+    return {
+        access_token: json.access_token,
+        refresh_token: json.refresh_token,
+        scope: json.scope,
+    };
+}
+async function runGoogleOAuthLoopback(args) {
+    const port = await pickPort(49152, 65535, new Set());
+    const state = randomBytes(18).toString("hex");
+    const pkce = args.clientSecret ? null : createPkcePair();
+    const redirectUri = `http://127.0.0.1:${port}/oauth/google/callback`;
+    let settled = false;
+    let resolveCode = () => { };
+    let rejectCode = () => { };
+    const codePromise = new Promise((resolve, reject) => {
+        resolveCode = resolve;
+        rejectCode = reject;
+    });
+    const server = createServer((req, res) => {
+        const url = new URL(req.url ?? "/", redirectUri);
+        if (url.pathname !== "/oauth/google/callback") {
+            res.writeHead(404, { "Content-Type": "text/plain" });
+            res.end("Not found");
+            return;
+        }
+        const gotState = url.searchParams.get("state");
+        const code = url.searchParams.get("code");
+        const error = url.searchParams.get("error");
+        if (gotState !== state) {
+            res.writeHead(400, { "Content-Type": "text/plain" });
+            res.end("State mismatch. Return to the terminal and retry setup.");
+            if (!settled) {
+                settled = true;
+                rejectCode(new Error("Google OAuth state mismatch."));
+            }
+            return;
+        }
+        if (error || !code) {
+            res.writeHead(400, { "Content-Type": "text/plain" });
+            res.end("Google authorization failed. Return to the terminal and retry setup.");
+            if (!settled) {
+                settled = true;
+                rejectCode(new Error(`Google OAuth failed: ${error ?? "missing code"}`));
+            }
+            return;
+        }
+        res.writeHead(200, { "Content-Type": "text/plain" });
+        res.end("Google Search Console authorization complete. You can close this tab.");
+        if (!settled) {
+            settled = true;
+            resolveCode(code);
+        }
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, "127.0.0.1", () => resolve());
+    });
+    const authUrl = new URL("https://accounts.google.com/o/oauth2/v2/auth");
+    authUrl.searchParams.set("client_id", args.clientId);
+    authUrl.searchParams.set("redirect_uri", redirectUri);
+    authUrl.searchParams.set("response_type", "code");
+    authUrl.searchParams.set("scope", GOOGLE_SEARCH_CONSOLE_SCOPES.join(" "));
+    authUrl.searchParams.set("access_type", "offline");
+    authUrl.searchParams.set("prompt", "consent");
+    authUrl.searchParams.set("state", state);
+    if (pkce) {
+        authUrl.searchParams.set("code_challenge", pkce.challenge);
+        authUrl.searchParams.set("code_challenge_method", "S256");
+    }
+    console.log(chalk.dim("\n  Open this URL in your browser, approve access, then return here:"));
+    console.log(chalk.cyan(`  ${authUrl.toString()}\n`));
+    try {
+        const code = await codePromise;
+        const token = await exchangeGoogleCode({
+            clientId: args.clientId,
+            clientSecret: args.clientSecret,
+            code,
+            redirectUri,
+            codeVerifier: pkce?.verifier,
+        });
+        if (!token.refresh_token) {
+            throw new Error("Google did not return a refresh token. Re-run setup and keep `prompt=consent`, or revoke the app at https://myaccount.google.com/permissions and try again.");
+        }
+        const scopes = token.scope?.split(/\s+/).filter(Boolean) ?? GOOGLE_SEARCH_CONSOLE_SCOPES;
+        assertGoogleSearchConsoleScopes(scopes);
+        return {
+            refreshToken: token.refresh_token,
+            scopes,
+        };
+    }
+    finally {
+        await new Promise((resolve) => server.close(() => resolve()));
+    }
+}
+export async function refreshGoogleSearchConsoleAccessToken(cfg) {
+    const body = new URLSearchParams({
+        client_id: cfg.clientId,
+        refresh_token: cfg.refreshToken,
+        grant_type: "refresh_token",
+    });
+    if (cfg.clientSecret)
+        body.set("client_secret", cfg.clientSecret);
+    const res = await fetch("https://oauth2.googleapis.com/token", {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body,
+    });
+    const json = (await res.json().catch(() => null));
+    if (!res.ok || !json?.access_token) {
+        const msg = json?.error_description ?? json?.error ?? `HTTP ${res.status}`;
+        throw new Error(`Google refresh token failed: ${msg}`);
+    }
+    return json.access_token;
+}
+export async function ensureGoogleSearchConsole() {
+    const existing = store.get("providers.googleSearchConsole");
+    const existingClientId = await getSecret(SECRET_KEYS.googleSearchConsoleClientId);
+    const existingClientSecret = await getSecret(SECRET_KEYS.googleSearchConsoleClientSecret);
+    const existingRefreshToken = await getSecret(SECRET_KEYS.googleSearchConsoleRefreshToken);
+    const hatchkitClientId = hatchkitGoogleSearchConsoleClientId();
+    const existingMode = existing?.oauthMode ?? (existingClientSecret ? "byo-client" : "hatchkit-pkce");
+    if (existing?.status === "configured" && existingRefreshToken) {
+        if (existingMode === "hatchkit-pkce" && hatchkitClientId) {
+            return {
+                ...existing,
+                oauthMode: "hatchkit-pkce",
+                clientId: hatchkitClientId,
+                refreshToken: existingRefreshToken,
+            };
+        }
+        if (existingClientId && existingClientSecret) {
+            return {
+                ...existing,
+                oauthMode: "byo-client",
+                clientId: existingClientId,
+                clientSecret: existingClientSecret,
+                refreshToken: existingRefreshToken,
+            };
+        }
+    }
+    console.log(chalk.yellow("\n  Google Search Console is not configured yet. Let's set it up."));
+    console.log(chalk.dim("  Hatchkit uses Google OAuth for Search Console and Site Verification.\n" +
+        "  You sign in with your own Google account; Hatchkit stores only that\n" +
+        "  account's refresh token in your OS keychain on this machine.\n"));
+    let clientId;
+    let clientSecret;
+    let oauthMode;
+    if (hatchkitClientId) {
+        clientId = hatchkitClientId;
+        oauthMode = "hatchkit-pkce";
+        console.log(chalk.dim("  Using Hatchkit's shipped Google OAuth client with PKCE. No Google Cloud setup or client secret is needed."));
+    }
+    else {
+        oauthMode = "byo-client";
+        console.log(chalk.dim("  No packaged Hatchkit Google OAuth client id is configured in this build.\n" +
+            "  Falling back to the legacy BYO Google Cloud OAuth client setup.\n"));
+        tokenHint("https://console.cloud.google.com/apis/credentials", "OAuth client (Desktop app) with Search Console API + Site Verification API enabled", `Scopes: ${GOOGLE_SEARCH_CONSOLE_SCOPES.join(", ")}`);
+        clientId = (await input({
+            message: "Google OAuth client ID:",
+            default: existingClientId ?? undefined,
+            validate: validateRequired,
+        })).trim();
+        clientSecret = await confirmPastedSecret("Google OAuth client secret");
+    }
+    const oauth = await runGoogleOAuthLoopback({ clientId, clientSecret });
+    const meta = {
+        status: "configured",
+        scopes: oauth.scopes,
+        oauthMode,
+        lastVerified: new Date().toISOString(),
+    };
+    store.set("providers.googleSearchConsole", meta);
+    if (oauthMode === "byo-client") {
+        await setSecret(SECRET_KEYS.googleSearchConsoleClientId, clientId);
+        if (clientSecret)
+            await setSecret(SECRET_KEYS.googleSearchConsoleClientSecret, clientSecret);
+    }
+    else {
+        await deleteSecret(SECRET_KEYS.googleSearchConsoleClientId);
+        await deleteSecret(SECRET_KEYS.googleSearchConsoleClientSecret);
+    }
+    await setSecret(SECRET_KEYS.googleSearchConsoleRefreshToken, oauth.refreshToken);
+    console.log(chalk.green("  ✓ Google Search Console configured"));
+    return { ...meta, clientId, clientSecret, refreshToken: oauth.refreshToken };
+}
+export async function getGoogleSearchConsoleConfig() {
+    const meta = store.get("providers.googleSearchConsole");
+    if (!meta || meta.status !== "configured")
+        return null;
+    const oauthMode = meta.oauthMode ?? "byo-client";
+    const clientId = await getSecret(SECRET_KEYS.googleSearchConsoleClientId);
+    const clientSecret = await getSecret(SECRET_KEYS.googleSearchConsoleClientSecret);
+    const refreshToken = await getSecret(SECRET_KEYS.googleSearchConsoleRefreshToken);
+    if (!refreshToken)
+        return null;
+    if (oauthMode === "hatchkit-pkce") {
+        const hatchkitClientId = hatchkitGoogleSearchConsoleClientId();
+        if (!hatchkitClientId)
+            return null;
+        return { ...meta, oauthMode, clientId: hatchkitClientId, refreshToken };
+    }
+    if (!clientId || !clientSecret)
+        return null;
+    return { ...meta, oauthMode: "byo-client", clientId, clientSecret, refreshToken };
+}
+// ---------------------------------------------------------------------------
 // Provider: Stripe (payments)
 // ---------------------------------------------------------------------------
 //
@@ -1250,10 +1575,22 @@ export async function reconfigureProvider(name) {
         ]);
         await ensureOpenpanel();
     }
+    else if (name === "plausible") {
+        await wipeProvider("providers.plausible", [SECRET_KEYS.plausibleApiKey]);
+        await ensurePlausible();
+    }
     else if (name === "resend") {
         await wipeProvider("providers.resend", [SECRET_KEYS.resendApiKey]);
         await ensureResend();
     }
+    else if (name === "search-console") {
+        await wipeProvider("providers.googleSearchConsole", [
+            SECRET_KEYS.googleSearchConsoleClientId,
+            SECRET_KEYS.googleSearchConsoleClientSecret,
+            SECRET_KEYS.googleSearchConsoleRefreshToken,
+        ]);
+        await ensureGoogleSearchConsole();
+    }
     else if (name === "stripe") {
         // NB: per-project Stripe entries (`stripe:project:<name>:*`) are
         // intentionally NOT swept here — those belong to individual scaffolded
@@ -1397,6 +1734,15 @@ function buildSetupGroups() {
                     },
                     run: () => reconfigureProvider("openpanel"),
                 },
+                {
+                    key: "plausible",
+                    label: "Plausible (web analytics)",
+                    status: () => {
+                        const m = store.get("providers.plausible");
+                        return { configured: m?.status === "configured", summary: m?.url };
+                    },
+                    run: () => reconfigureProvider("plausible"),
+                },
                 {
                     key: "resend",
                     label: "Resend (transactional email)",
@@ -1406,6 +1752,23 @@ function buildSetupGroups() {
                     },
                     run: () => reconfigureProvider("resend"),
                 },
+                {
+                    key: "search-console",
+                    label: "Google Search Console",
+                    status: () => {
+                        const m = store.get("providers.googleSearchConsole");
+                        return {
+                            configured: m?.status === "configured",
+                            summary: [
+                                m?.oauthMode === "hatchkit-pkce" ? "Hatchkit OAuth" : m ? "BYO OAuth" : null,
+                                m?.scopes?.length ? `${m.scopes.length} scopes` : null,
+                            ]
+                                .filter(Boolean)
+                                .join(", "),
+                        };
+                    },
+                    run: () => reconfigureProvider("search-console"),
+                },
                 {
                     key: "defaultForwardingEmail",
                     label: "Default forwarding email",
@@ -1513,7 +1876,7 @@ export async function runOnboarding() {
         console.log();
     }
     // Summary — show both what's configured and what's still missing so
-    // the user notices optional-but-important steps (GlitchTip / OpenPanel
+    // the user notices optional-but-important steps (GlitchTip / OpenPanel / Plausible
     // / Resend) they may have skipped.
     const configured = allSteps.filter((s) => s.status().configured);
     const unconfigured = allSteps.filter((s) => !s.status().configured);